NEW ZEALAND Law and Practice Contributed by: Fiona Ashby, Luke Bowers, Daniel Erickson, Jessica Phillips, Natalie Foster, Shelley Slade-Gully, Tina Liu and Theresa Le Bas, Tompkins Wake
8.3 Role and Authority of the Data Protection Agency The Office of the Privacy Commissioner Data protection in New Zealand falls under the over - sight of the Office of the Privacy Commissioner (OPC), which holds broad powers to promote and protect individual privacy rights. The Privacy Commissioner receives and investigates complaints from individu - als who believe their personal information has been mishandled, and may also initiate its own investiga - tions where systemic concerns are identified, without waiting for a complaint to be lodged. Where a serious breach is established, the Commissioner may refer the matter to the Director of Human Rights Proceed - ings (appointed under the Human Rights Act 1993), who has discretion to bring proceedings in the Human Rights Review Tribunal (an independent judicial body with the power to make binding orders and award compensation to affected individuals). Complainants may also apply directly to the Tribunal. Rule-Making and Enforcement A particularly significant aspect of the Commission - er’s authority is the power to issue binding privacy codes of practice under the Privacy Act 2020. These codes allow the OPC to extend and sharpen the Act’s baseline obligations in response to emerging risks. The Biometric Processing Privacy Code 2025, issued by the Commissioner and in force from 3 November 2025, demonstrates the OPC’s willingness to exer - cise this power proactively, including in response to emerging technologies. Non-compliance with the Act or an applicable code may result in investigation by the Commissioner, compliance notices, proceedings before the Human Rights Review Tribunal and, in some circumstances, statutory offences and financial penalties (including for company directors). The Act also imposes mandatory notification obliga - tions where a privacy breach has caused or is likely to cause serious harm, requiring affected organisa - tions to notify both the Commissioner and affected individuals as soon as practicable. These mechanisms support the OPC’s ability to monitor compliance and respond to significant privacy incidents.
Educational and Advisory Role Alongside its enforcement functions, the OPC per - forms an important educational and advisory role, including by issuing detailed guidance to assist organ - isations in understanding and meeting their obliga - tions. Although the guidance does not have the force of law, it provides important insight into the Commis - sioner’s expectations regarding privacy governance and regulatory compliance. This function is particu - larly valuable for overseas investors establishing New Zealand operations who are unfamiliar with the local privacy framework. The government is currently progressing a compre - hensive reform of New Zealand’s environmental law regime, replacing the Resource Management Act 1991 (RMA) with two new statutes. The Planning Bill regulates land use, development and subdivision, while the Natural Environment Bill regulates the use of natural resources and effects on the environment. The two Bills, once enacted, will replace the RMA in its entirety. Both Bills were introduced to Parliament on 9 Decem - ber 2025 and passed their First Reading on 16 December 2025. The Environment Select Committee has concluded hearing submissions on the Bill and is scheduled to release its report and recommendations to Parliament on 20 July 2026. The government is tar - geting enactment of both Bills in September 2026. A three to five-year transition period is anticipated. Investors in land development, infrastructure and pri - mary industries should closely monitor the progress of these Bills and the transitional regime, as they are likely to materially change the resource consenting 9. Looking Forward 9.1 Upcoming Legal Reforms Resource Management Reform
landscape in New Zealand. Employment Law Changes
The Holidays Act 2003 is expected to be repealed and replaced by legislation that, if enacted in 2026, will come fully into force approximately two years after Royal Assent. The Employment Leave Bill passed its third reading on 29th July and is awaiting Royal assent.
772 CHAMBERS.COM
Powered by FlippingBook